SUSE-SU-2022:2393-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:2393-1

Related

Published

2022-07-14T07:27:37Z

Modified

2022-07-14T07:27:37Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages (bsc#1199487).
CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
CVE-2022-20141: Fixed a possible use after free due to improper locking in ipcheckmc_rcu() (bsc#1200604).
CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
CVE-2022-20154: Fixed a use after free due to a race condition in locksocknested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).
CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bsc#1177282)
CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space (bsc#1200144).
CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space (bsc#1200143).
CVE-2022-1729: Fixed a sysperfevent_open() race condition against self (bsc#1199507).
CVE-2022-1184: Fixed a use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (bsc#1198577).
CVE-2022-21499: Lock down kgdb to prohibit secure-boot bypass (bsc#1199426).
CVE-2019-19377: Fixed a user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image (bsc#1158266).

The following non-security bugs were fixed:

btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
exec: Force single empty string when argv is empty (bsc#1200571).

References

Affected packages

SUSE:OpenStack Cloud 9 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:OpenStack Cloud 9 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:OpenStack Cloud 9 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 9 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 9 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 9 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise High Availability Extension 12 SP4 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "4.12.14-95.102.1",
            "gfs2-kmp-default": "4.12.14-95.102.1",
            "ocfs2-kmp-default": "4.12.14-95.102.1",
            "cluster-md-kmp-default": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP4 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-95_102-default": "1-6.3.1",
            "kernel-default-kgraft": "4.12.14-95.102.1",
            "kernel-default-kgraft-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP4 / kgraft-patch-SLE12-SP4_Update_28

Package

Name: kgraft-patch-SLE12-SP4_Update_28
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP4_Update_28&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1-6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-95_102-default": "1-6.3.1",
            "kernel-default-kgraft": "4.12.14-95.102.1",
            "kernel-default-kgraft-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default-man": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default-man": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.102.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.102.1",
            "kernel-devel": "4.12.14-95.102.1",
            "kernel-default-base": "4.12.14-95.102.1",
            "kernel-default-man": "4.12.14-95.102.1",
            "kernel-default": "4.12.14-95.102.1",
            "kernel-source": "4.12.14-95.102.1",
            "kernel-syms": "4.12.14-95.102.1",
            "kernel-default-devel": "4.12.14-95.102.1"
        }
    ]
}